Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-106509
  • github.com/backstage/backstage
 Backstage: Improper validation of MkDocs theme configuration in TechDocs 17 hours ago
  • Fix available
  • Severity - 7.7 (High)
CVE-2026-106508
  • github.com/backstage/backstage
 Backstage: Potential file exposure through local TechDocs publisher 17 hours ago
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2026-106507
  • github.com/backstage/backstage
 Backstage: TechDocs arbitrary file read via mkdocs snippets 17 hours ago
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2026-106506
  • github.com/backstage/backstage
 Backstage: Improper input validation in scaffolder task list ordering 17 hours ago
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2026-106505
  • github.com/backstage/backstage
 Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend 17 hours ago
  • Fix available
  • Severity - 7.7 (High)
CVE-2026-106504
  • github.com/backstage/backstage
 Backstage: Sensitive information exposure in scaffolder task logs 17 hours ago
  • Fix available
  • Severity - 6.5 (Medium)
CVE-2026-106503
  • github.com/backstage/backstage
 Backstage: Scaffolder action input authorization bypass 17 hours ago
  • Fix available
  • Severity - 8.1 (High)
CVE-2026-97626
  • github.com/go-gitea/gitea
 Gitea profile feed disclosure bypassing user visibility 17 hours ago
  • No fix available
CVE-2026-96594
  • github.com/go-gitea/gitea
 Gitea repository media API stored XSS 17 hours ago
  • No fix available
CVE-2026-89182
  • github.com/go-gitea/gitea
 Gitea push-to-create bypass of FORCE_PRIVATE policy 17 hours ago
  • No fix available
CVE-2026-105268
  • github.com/go-gitea/gitea
 Gitea issue attachment API allows changing comment attachments 17 hours ago
  • No fix available
CVE-2026-105267
  • github.com/go-gitea/gitea
 Gitea tag delete route deletes releases without release permission 17 hours ago
  • No fix available
CVE-2026-104633
  • github.com/go-gitea/gitea
 Gitea migration memory exhaustion from zero page size 17 hours ago
  • No fix available
CVE-2026-101023
  • github.com/go-gitea/gitea
 Gitea OAuth2 refresh token grant accepts access tokens 17 hours ago
  • No fix available
CVE-2026-106502
  • github.com/backstage/backstage
 Backstage: Sensitive information may be exposed in Scaffolder task failure... 17 hours ago
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2026-106501
  • github.com/backstage/backstage
 Backstage: Sensitive information exposure in Scaffolder 17 hours ago
  • Fix available
  • Severity - 9.6 (Critical)
Load more...